https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 11:15:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-384292 EUVD-2026-384292 https://cve.radiocsirt.org/vuln/euvd-2026-384292 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92414 <p>: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit.</p> <p>Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with</p> <p>no credential check.</p> <p>This issue affects Apache Jackrabbit: from 2.23.0 through 2.23.5, from 2.22.0 through 2.22.4, from 2.20.0 through 2.20.17.</p> <p>Users are recommended to upgrade to versions 2.23.6, 2.22.5, or 2.20.18 which fix the issue.</p> <p>: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit.</p> <p>Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with</p> <p>no credential check.</p> <p>This issue affects Apache Jackrabbit: from 2.23.0 through 2.23.5, from 2.22.0 through 2.22.4, from 2.20.0 through 2.20.17.</p> <p>Users are recommended to upgrade to versions 2.23.6, 2.22.5, or 2.20.18 which fix the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-92414 https://cve.radiocsirt.org/vuln/ghsa-3mf8-5fj8-p748 <p>: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit.</p> <p>Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with</p> <p>no credential check.</p> <p>This issue affects Apache Jackrabbit: from 2.23.0 through 2.23.5, from 2.22.0 through 2.22.4, from 2.20.0 through 2.20.17.</p> <p>Users are recommended to upgrade to versions 2.23.6, 2.22.5, or 2.20.18 which fix the issue.</p> <p>: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit.</p> <p>Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with</p> <p>no credential check.</p> <p>This issue affects Apache Jackrabbit: from 2.23.0 through 2.23.5, from 2.22.0 through 2.22.4, from 2.20.0 through 2.20.17.</p> <p>Users are recommended to upgrade to versions 2.23.6, 2.22.5, or 2.20.18 which fix the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-3mf8-5fj8-p748 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-92414 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: jackrabbit, Ubuntu:16.04:LTS: jackrabbit, Ubuntu:18.04:LTS: jackrabbit, Ubuntu:20.04:LTS: jackrabbit, Ubuntu:22.04:LTS: jackrabbit, Ubuntu:24.04:LTS: jackrabbit, Ubuntu:26.04:LTS: jackrabbit</p> <p>: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23.0 through 2.23.5, from 2.22.0 through 2.22.4, from 2.20.0 through 2.20.17. Users are recommended to upgrade to versions 2.23.6, 2.22.5, or 2.20.18 which fix the issue.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: jackrabbit, Ubuntu:16.04:LTS: jackrabbit, Ubuntu:18.04:LTS: jackrabbit, Ubuntu:20.04:LTS: jackrabbit, Ubuntu:22.04:LTS: jackrabbit, Ubuntu:24.04:LTS: jackrabbit, Ubuntu:26.04:LTS: jackrabbit</p> <p>: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23.0 through 2.23.5, from 2.22.0 through 2.22.4, from 2.20.0 through 2.20.17. Users are recommended to upgrade to versions 2.23.6, 2.22.5, or 2.20.18 which fix the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-92414